# 4.2.18.2.2 TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP — `-man` ↔ `-cas` diff 报告
> **交付形态说明**：本报告随专家交付包分发——`-man`/`-cas` 脚本包 zip 与 190server HTML 执行日志已内联至 `packages/`、`evidence-html/`，相应路径已相对化；TTR、spec_intl、caseir 等仓内留痕仍为生成机原始路径（未随包）。

- 生成时间：2026-10-08 22:57:10 ｜引擎：holiday-blk5/0.1｜配对状态：`PAIRED`
- 分母口径：卡侧 61 之一

## 1. 配对与包

| 侧 | 包/源 | sha256 | 源类型 | 入口用例 |
|---|---|---|---|---|
| `-man` | 4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP-man.zip | `342da3854694dfb9b0ae47be20fdfea7bf6e86ba7e53d9e502fd7f164a46feef` | zip | TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_Nominal_Without_MatchingID_in_CtxParams1 |
| `-cas` | 4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP-cas.zip | `6a0dfc0efff9cbcc8b54161e540dcb1641f49ec7fa0144dd991eae5b2582c286` | zip | — |

- man 源路径：`../../packages/man/4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP-man.zip`
- cas 源路径：`../../packages/cas/4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP-cas.zip`
- 上游来源：{"man_ledger": true, "cas_ledger": true, "naming_map": true, "html_probe": true, "man_package": true, "cas_package": true}
- 适用性：naming-map=`C002` ["C002", "C002", "C002", "C002", "C002"]；caseir=`C002`

## 2. 执行摘要（双方 job/终态）

| 侧 | 终态/计划 | 备注 | ErrorCount | job_id | 业务状态 | TTR | 诊断包 |
|---|---|---|---|---|---|---|---|
| `-man` | `ok` | `_ok` 复用（结构 A1-A7 PASS；`_ok` run 无厂商错误行） | 0 | `20260909_011618_ok:48632d3f3f8c42b0a9864d515e529d0e` | — | `/Users/yuhu/cas/原料/切片/4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP/logs/20260909_011618_ok/result/ESIM_TEST_SGP_23/TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_Nominal_Without_MatchingID_in_CtxParams1.ttr` | `—` |
| `-cas` | `placed` | 纯 native 零卡态前置（N0） | 0 | `30a0043a7f6340bd837b1f977c952a4b` | — | `/Users/yuhu/cas/experiments/4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP-20261004_022633/logs/30a0043a7f6340bd837b1f977c952a4b/result/TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP/TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_03_Nominal_TC_3_Test_Sequence.ttr` | `—` |
- cas 块4账本：decision=`RERUN`；route=`native_N0`；live 事件 1 条（4.6 波次进行中；以块4终版账本为准）
- cas 4.6 波次最新执行：terminal=`placed`；stage=`place`；job=`30a0043a7f6340bd837b1f977c952a4b`；gaps=["L6/version_binding 证据缺席：锚单元无 hil.json——如实 False/None", "version_binding 同窗采集携带（cas_bind sha256 + abi_contract + 当次诊断包 tool_version 三件齐备）"]
- cas 失败归因引用（块4）：`b5-attribution.md`
- cas 证据来源分层：`RERUN` → 本轮 4.6 波次执行

## 3. HTML 执行日志状态

- `-man`：**NATIVE**（`../../evidence-html/4.2.18.2.2/man/TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_Nominal_Without_MatchingID_in_CtxParams1.html`；sha256 `bf53335a978e7992a6a34423ecfa4a1fe1079e11244ce6a3f0f04c1621592aa6`；169590 bytes）
- `-cas`：**NATIVE**（`../../evidence-html/4.2.18.2.2/cas/TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_03_Nominal_TC_3_Test_Sequence.html`；sha256 `ca530189432be30fe7a50946923451f0368a64b53db74104a91c3413b4b93742`；89405 bytes）
- 纪律：原生缺失 → `HTML_UNAVAILABLE` 显式阻断（附探针结论）；派生件仅标 `DERIVED_NOT_NATIVE`，不冒充原生。

## 4. L1 脚本/依赖/命名差异（源文件闭包级）

- 闭包规模：man 34 文件 / cas 82 文件；同名 31（字节同 30，内容异 1）
- 同名内容异：`Import/TestCase_SGP_23.js`
- man-only 文件 3：`ESIM_TEST_SGP_23.UCE`, `ESIM_TEST_SGP_23.sol`, `MANIFEST.json`
- cas-only 文件 51：`Import/CapInfo.js`, `Import/ExecuteTestCase.js`, `Import/ExecuteTestCase_CSC.js`, `Import/ExecuteTestCase_LoadProfile_via_bip.js`, `Import/ExecuteTestCase_Local_Management.js`, `Import/ExecuteTestCase_Non_Telecom_Profile.js`, `Import/ExecuteTestCase_Performance.js`, `Import/ExecuteTestCase_PressureTest.js`, `Import/ExecuteTestCase_ProfileFormatTest_V_2_3_1.js`, `Import/ExecuteTestCase_ProfileServicesListTest.js` …
- 注：man 包＝切片最小闭包（`script/` 投影）；cas 包＝slice_native 全工程投影（厂商参照闭包＋生成体）。闭包规模差为打包形态差异；同名文件字节差集中于 `Import/TestCase_SGP_23.js`（TC 入口本体）。

### 4.1 入口代码对照

- 行数：man 207 / cas 515；字符：man 8358 / cas 48180
- man 顶层调用 Top：[["TestStepStart2", 30], ["GenHexData", 9], ["check_Applicability_of_tests_RSP_SGP23_test", 3], ["TraceStart", 3], ["ResetCard", 3], ["TS_TERMINAL_CAPABILITY_cmd", 3], ["TS_MANAGE_CHANNEL_OPEN", 3], ["TS_SELECT", 3], ["RSP_profile_load_procedure_LPAd", 3], ["ES10b_GetEUICCInfo1", 3]]
- cas bind 调用：[["checkData", 92], ["sendApdu", 9], ["resetAndAtr", 1], ["runToSteadyState", 1], ["sendTerminalProfile", 1], ["manageChannelOpen", 1]]

| 方言映射对 | 命中数 |
|---|---|
| ResetCard() ↔ bind.resetAndAtr() | 3 |
| TS_*_cmd() ↔ bind.* 命令封装 | 9 |

<details><summary>unified diff（截断预览）</summary>

```diff
--- man
+++ cas
@@ -1,206 +1,514 @@
-// slice of Import\TestCase_SGP_23.js - cases: TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_Nominal_Without_MatchingID_in_CtxParams1 + TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_02_Nominal_With_MatchingID_in_CtxParams1 + TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_03_Nominal_With_IMEI_in_Device_Capabilities (extracted verbatim)
-
-function TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_Nominal_Without_MatchingID_in_CtxParams1()
-{
-	//测试入口条件
-	if(!check_Applicability_of_tests_RSP_SGP23_test("C002"))
-		return;
-
-	tracenamestr = "测试目的：执行AuthenticateServer指令，CtxParams1中没有MatchingID";
-	curDis.TraceStart(sno++,tracenamestr);
-
-	curDis.TestStepStart2(stno++,"复位；");
-	ResetCard();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送Terminal Capability命令；");
-	TS_TERMINAL_CAPABILITY_cmd();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送MANAGE_CHANNEL命令，打开辅助逻辑通道；");
-	TS_MANAGE_CHANNEL_OPEN();
-
-	curLogicChannel = 1;
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送SELECT命令，选择ISD-R；");
-	TS_SELECT("Select ISD",ISD_R_AID,"9000");
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行GetEuiccInfo1Request；");
-	pkId_CI_ForVerification = pkId_CI_ECDSA_BRP;
-	pkId_CI_ForSigning = pkId_CI_ECDSA_BRP;
-
-	var Profile_load_procedure = new RSP_profile_load_procedure_LPAd(PROFILE_OPERATIONAL1_DATA);
-	Profile_load_procedure.ICCID = ICCID_OP_PROF1;
-	Profile_load_procedure.ES10b_GetEUICCInfo1();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行GetEuiccChallengeRequest；");
-	Profile_load_procedure.ES10b_GetEUICCChallenge();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行AuthenticateServerRequest；");
-	var DeviceCapabilities1 = new DeviceCapabilities();
-	DeviceCapabilities1.gsmSupportedRelease = "050000";
-	DeviceCapabilities1.utranSupportedRelease = "080000";
-	DeviceCapabilities1.cdma2000onexSupportedRelease = "010000";
-	DeviceCapabilities1.cdma2000hrpdSupportedRelease = "010000";
-	DeviceCapabilities1.cdma2000ehrpdSupportedRelease = "020000";
-	DeviceCapabilities1.eutranSupportedRelease = "020000";
-	DeviceCapabilities1.contactlessSupportedRelease = "090000";
-	DeviceCapabilities1.rspCrlSupportedVersion = "020100";
-
-	var DeviceInfo1 = new DeviceInfo();
-	DeviceInfo1.tac = "00000000";
-	DeviceInfo1.deviceCapabilities = DeviceCapabilities1.GenHexData();
-
-	var CtxParamsForCommonAuthentication1 =new CtxParamsForCommonAuthentication();
-	CtxParamsForCommonAuthentication1.deviceInfo = DeviceInfo1.GenHexData();
-	ctxParamsForCommonAuthentication=CtxParamsForCommonAuthentication1.GenHexData();
-
-	Profile_load_procedure.ES10b_AuthenticateServer();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行PrepareDownloadRequest；");
-	Profile_load_procedure.ES10b_PrepareDownload();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行GetEuiccDataRequest(GetEID)；");
-	Profile_load_procedure.ES10b_GetEID();
-
-	curDis.TestStepStart2(stno++,"读卡器向卡片发送 StoreData命令，执行BoundProfilePackage；--空Proprietary 数据");
-	Profile_load_procedure.ES10b_LoadBoundProfilePackage();
-
-	RecoverCard();
+// Author: 卡思Cas智能体
+// Date: 20261004-022633
+// Function: （purpose 原文未由 SGP.23 该 TC 提供，corpus vacuum 登记）TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP，Test Sequence #01-#03 Nominal（本 TC 全部 3 条 Test Sequence 合并展开），适用性 C002。
+// Test points: ICH-IC1-K1-C1 ATR_present；ICH-IC1-K2-C2 FCP_Template；ICH-IC1-K2-C4 SW
+//   ICH-IC1-K3-C4 SW；ICH-IC1-K4-C4 final SW；ICH-IC2-K1-C4 SW；ICH-IC2-K1-C3 CHANNEL_NUMBER extracted
+//   ICH-IC2-K2-C4 SW；S1-C1 SW；S1-C2 R_EUICC_INFO1 outer tag
+//   S1-C2 R_EUICC_INFO1 required members present；S1-C3 CI PK lists share at least one key id
+//   S2-C1 SW；S2-C2 R_CHALLENGE outer tag；S2-C2 R_CHALLENGE required members present
+//   S2-C2 tagOfeuiccChallenge；S2-C2 lengthOfeuiccChallenge；S4-C1 SW；S4-C2 structure_ok
+//   S4-C3 transactionId echo；S4-C4 serverChallenge echo；S4-C5 sig_verify；S4-C6 ctxParams1 echo
+//   S4-C2 R_AUTHENTICATE_SMDP authenticateResponseOk structure；S4-C5 euiccSignature1 verify
+//   S5-C1 SW；S5-C2 R_EUICC_INFO1 outer tag；S5-C2 R_EUICC_INFO1 required members present
+//   S5-C3 CI PK lists share at least one key id；S6-C1 SW；S6-C2 R_CHALLENGE outer tag
+//   S6-C2 R_CHALLENGE required members present；S6-C2 tagOfeuiccChallenge
+//   S6-C2 lengthOfeuiccChallenge；S8-C1 SW；S8-C2 structure_ok；S8-C3 transactionId echo
+//   S8-C4 serverChallenge echo；S8-C5 sig_verify；S8-C6 ctxParams1 echo
+//   S8-C2 R_AUTH_SMDP_MATCH_ID authenticateResponseOk structure；S8-C5 euiccSignature1 verify
+//   S9-C1 SW；S9-C2 R_EUICC_INFO1 outer tag；S9-C2 R_EUICC_INFO1 required members present
+//   S9-C3 CI PK lists share at least one key id；S10-C1 SW；S10-C2 R_CHALLENGE outer tag
+//   S10-C2 R_CHALLENGE required members present；S10-C2 tagOfeuiccChallenge
+//   S10-C2 lengthOfeuiccChallenge；S12-C1 SW；S12-C2 structure_ok；S12-C3 transactionId echo
+//   S12-C4 serverChallenge echo；S12-C5 sig_verify；S12-C6 ctxParams1 echo
+//   S12-C2 R_AUTH_SMDP_IMEI authenticateResponseOk structure；S12-C5 euiccSignature1 verify
+// 本函数由 CaseIR 4.2.18.2.2 编译生成（4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP-20261004_022633，SGP.23 v1.16 × SGP.22 v2.7）：字节权威=CaseIR，非誊录黄金脚本。
+// Value-free template: every data byte is injected from CaseIR fields; no scaffold globals (see docs/speconly/compile-symbol-migration.md).
+// 适用性 C002：编译期门，运行时由 harness 环境前置承担。
+function TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_03_Nominal_TC_3_Test_Sequence() {
+    var bind = curBind;
+
+    // IC head inline (initial_conditions → PROC_EUICC_INITIALIZATION_SEQUENCE, K row 1)：RESET（K 语料机械展开）
+    var s13 = bind.resetAndAtr();
+    bind.checkData("ICH-IC1-K1-C1 ATR_present", "1", s13.atr_hex !== "" ? "1" : "0");
+
+    // IC head inline (initial_conditions → PROC_EUICC_INITIALIZATION_SEQUENCE, K row 2)：SELECT_MF（K 语料机械展开）
+    // FCP outer tag not materialized from clause: tag-face asserted only when corpus fixes the tag byte (e.g. TS 102 221 FCP '62').
+    var s14 = bind.sendApdu("00", "A4", "00", "04", "3F00", "00", "9000");
+    bind.checkData("ICH-IC1-K2-C2 FCP_Template", "1", s14.resp.length > 0 ? "1" : "0");
+    bind.checkData("ICH-IC1-K2-C4 SW", "9000", s14.sw);
+
+    // IC head inline (initial_conditions → PROC_EUICC_INITIALIZATION_SEQUENCE, K row 3)：TERMINAL_CAPABILITY_LPAd（K 语料机械展开）
+    var s15 = bind.sendApdu("80", "AA", "00", "00", "A9058100830107", null, "9000");
+    bind.checkData("ICH-IC1-K3-C4 SW", "9000", s15.sw);
+
+    // IC head inline (initial_conditions → PROC_EUICC_INITIALIZATION_SEQUENCE, K row 4)：TERMINAL_PROFILE（K 语料机械展开）
+    var steady16 = bind.runToSteadyState(function () {
+        return bind.sendTerminalProfile("FFFFFFFF7F9D00DFBF00001FE2000000C7EB0000000168005000000000000200", "9000");
+    });
+    bind.checkData("ICH-IC1-K4-C4 final SW", "9000", steady16.final.sw);
+
+    // IC head inline (initial_conditions → PROC_OPEN_LOGICAL_CHANNEL_AND_SELECT_ISDR, K row 1)：MANAGE_CHANNEL_OPEN（K 语料机械展开）
…（差异行超限，共 722 行，此处截断）
```

</details>
### 4.2 UCE/命名对照

- man：`ESIM_TEST_SGP_23.UCE`；入口 [('TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_Nominal_Without_MatchingID_in_CtxParams1', 'TC_EUICC_ES10B.AuthenticateServer_SM-DP+_BRP', 'Import\\\\ExecuteTestCase_SGP_23.js(TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_Nominal_Without_MatchingID_in_CtxParams1)')]；参数 {"ReaderName": "Identiv SCR35xx USB Smart Card Reader 0"}
- cas：`TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP/TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP.uce`；入口 [('TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_03_Nominal_TC_3_Test_Sequence', 'TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP', 'Import\\\\ExecuteTestCase_spec.js(TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_03_Nominal_TC_3_Test_Sequence)')]；参数 {"ReaderName": "Identiv SCR35xx USB Smart Card Reader 0"}

## 5. L2 步骤/APDU/step_map 差异（结构化对齐）

- 命令计数：man 72 / cas 55；精确对齐 10，核心（CLA·INS·P1·P2·Lc）同 7，man-only 55，cas-only 38

| # | `-man` | `-cas` | 对齐 |
|---|---|---|---|
| 1 | `@RESET` | `@RESET` | exact |
| 2 | `80AA000007A9058100830137` | `80AA000007A9058100830107` | core_same |
| 3 | `0070000001` | `0070000001` | exact |
| 4 | `01A4040010A0000005591010FFFFFFFF8900000100` | `01A4040010A0000005591010FFFFFFFF8900000100` | exact |
| 5 | `01C0000021` | `01C0000021` | exact |
| 6 | `81E2910003BF2000` | `81E2910003BF200000` | core_same |
| 7 | `81E2910003BF2E00` | `81E2910003BF2E0000` | core_same |
| 8 | `01C0000000` | `01C0000000` | exact |
| 9 | `01C0000000` | `01C0000000` | exact |
| 10 | `01C0000000` | `01C0000000` | exact |
| 11 | `01C0000000` | `01C0000000` | exact |
| 12 | `01C0000000` | `01C0000000` | exact |
| 13 | `01C0000000` | `01C0000000` | exact |
| 14 | `81E2910003BF2000` | `81E2910003BF200000` | core_same |
| 15 | `81E2910003BF2D00` | `81E2910003BF2E0000` | core_same |
| 16 | `81E2910003BF2800` | `81E2910003BF200000` | core_same |
| 17 | `81E2910003BF2800` | `81E2910003BF2E0000` | core_same |
| — | man-only: `0070000000`, `01C00000A9`, `01C0000015`, `81E21100FFBF3882031430498010B44C3D5F0C23…7525350`, `81E21101FF54455354310B300906035504061302…E060355`, `81E21102FF1D1104073005880388370A300E0603…0008203`, `81E291031C010000830301000084030200008503…3020100`, `01C0000050`, `81E21100FFBF2182029530158010B44C3D5F0C23…6035504`, `81E21101FF030C0B5445535420534D2D44502B30…1687474`, `81E291029C703A2F2F63692E746573742E67736D…C41681D`, `01C00000A2` | | |
| — | | cas-only: `00A40004023F0000`, `00C0000020`, `8010000020FFFFFFFF7F9D00DFBF00001FE20000…0000200`, `801200000F`, `801400000C810301250082028281830100`, `81C00000A9`, `81C0000015`, `01E21100FFBF3882031D305280105BB716214066…5040A00`, `01E21101FF0C0752535054455354310B30090603…BE53000`, `01E21102FF0E0603551D1104073005880388370A…0030500`, `01E2910325000081030800008203010000830301…2010000`, `01C0000058` | | |

## 6. L3 规范字段/Expected/REQ/通过条件差异

- spec：/Users/yuhu/cas/原料/切片/4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP/spec_intl/SGP.23-v1.16_4.2.18_AuthenticateServer_SM-DP+_BRP.md（风格：mapping）；caseir：`/Users/yuhu/cas/产物/4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP/caseir_materialized_gate.json`

spec_intl 为人工核订映射表风格（规范步骤 ↔ 厂商脚本实现 ↔ 实跑结果）：

| 规范步骤 | man 脚本实现 | man 实跑结果 |
|---|---|---|
| IC1 PROC_EUICC_INITIALIZATION_SEQUENCE | C002 门禁（L6）→ `ResetCard()`（L13）→ `TS_TERMINAL_CAPABILITY_cmd()`（L16） | 通过（步骤 1-2＝APDU3/6，复位成功＋TC SW=9000 在案） |
| IC2 PROC_OPEN_LOGICAL_CHANNEL_AND_SELECT_ISDR | `TS_MANAGE_CHANNEL_OPEN()`（L19）→ `TS_SELECT("Select ISD",ISD_R_AID,"90 | 通过（步骤 3-4＝APDU11/17，通道 01 开＋ISD-R SW=9000） |
| 1 #GET_EUICC_INFO1（CI 列表核验：BRP 同根 CI 在场） | **BRP CI 注入** `pkId_CI_ForVerification/ForSigning=pkId_CI_ECDSA_BRP`（L | 通过（步骤 5＝APDU23，R_EUICC_INFO1 SW=9000；BRP CI 键 id `C0BC70BA…` 在响应在案） |
| 2 #GET_EUICC_CHALLENGE | `ES10b_GetEUICCChallenge()`（L35） | 通过（步骤 6＝APDU29，R_CHALLENGE SW=9000） |
| 3 InitiateAuthentication 输入组装（BRP CI＋#CERT_S_SM_DPauth_ECDSA 同根） | DeviceCapabilities 八字段（L38-46）→ DeviceInfo tac=00000000（L48-50）→ CtxPa | 通过（步 4 请求载荷含 brainpool OID `2B2403030208010107`＋CN="TEST SM-DP+" 证书体，A |
| 4 `MTD_STORE_DATA_SCRIPT(#AUTHENTICATE_SMDP)` → #R_AUTHENTICATE_SMDP＋SW=0x9000 | `ES10b_AuthenticateServer()`（L56，BF38 请求链式 81E2 发送） | 通过（步骤 7＝APDU35 起请求 `BF38820314`（APDU37-62）逐包 SW=9000；响应 `BF3882064B`（A |
| 4 断言 a：EUICC_SIGNATURE1 用 #PK_EUICC_ECDSA 验签 | `Euicc_RSP_Verify`（过程库，含证书链） | 通过（**EUM证书验证成功**（APDU73）＋**EUICC证书验证成功**（APDU74）＋**卡片返回签名数据正确**（APDU75 |
| 4 断言 b：euiccSigned1 中 S_TRANSACTION_ID 与请求相同 | 过程库内部＋raw 字节比对（规范步骤列复核） | 通过（**字节级**：请求 `8010 B44C3D5F0C23BDF0C2BE06D490233CD5`（APDU37/41）↔ 响应 e |
| 4 断言 c：S_SMDP_CHALLENGE 与请求相同 | 同上（SGP.22 L9078：serverChallenge [4] Octet16，tag 84） | 通过（**字节级**：请求 `8410 6B3D92435B8A7358245EF68EF28D3CE3`（APDU37/41）↔ 响应 e |
| （厂商附加链节，非规范步骤）PrepareDownload→GetEID→LoadBPP（空 Proprietary 数据）会话闭环 | `ES10b_PrepareDownload()`（L59）＋`ES10b_GetEID()`（L62）＋`ES10b_LoadBoundP | 通过（步骤 8-10＝APDU79/105/111：BF21 请求/响应 SW=9000＋签名正确（APDU104）；BPP 段流至 **P |
| （收尾，非规范步骤） | `RecoverCard()`（L67） | 通过（Transaction 2 APDU208-327：MemoryReset（期望值 BF3403800100/0101 析取在案 AP |

cas CaseIR 步骤/检查：

| 步 | 动作 | checks | REQ |
|---|---|---|---|
| 1 | [Seq#01] MTD_STORE_DATA (#GET_EUICC_INFO1) | ["S1-C1", "S1-C2", "S1-C3"] | [] |
| 2 | [Seq#01] MTD_STORE_DATA (#GET_EUICC_CHALLENGE) | ["S2-C1", "S2-C2"] | [] |
| 3 | [Seq#01] Step4 输入准备（InitiateAuthentication）：<S_TRANSACTION_ID>、<EUICC_ | [] | [] |
| 4 | [Seq#01] MTD_STORE_DATA_SCRIPT(#AUTHENTICATE_SMDP) | ["S4-C1", "S4-C2", "S4-C3", "S4-C4", "S4-C5", "S4-C6"] | ["RQ26_029", "RQ26_005", "RQ26_006", "RQ26_007", "RQ26_008", "RQ26_034", "RQ26_035", "RQ31_025", "RQ31_046", "RQ31_047", "RQ31_048", "RQ31_049", "RQ31_050", "RQ31_051", "RQ31_053", "RQ31_054", "RQ31_055", "RQ31_076", "RQ31_079", "RQ42_001", "RQ43_001", "RQ43_002", "RQ45_002", "RQ55_004", "RQ55_005", "RQ57_094", "RQ57_095", "RQ57_096", "RQ57_097", "RQ57_098", "RQ57_099", "RQ57_101", "RQ57_102", "RQ57_103", "RQ57_104", "RQ57_105", "RQ57_106", "RQ57_107", "RQ57_108"] |
| 5 | [Seq#02] MTD_STORE_DATA (#GET_EUICC_INFO1) | ["S5-C1", "S5-C2", "S5-C3"] | [] |
| 6 | [Seq#02] MTD_STORE_DATA (#GET_EUICC_CHALLENGE) | ["S6-C1", "S6-C2"] | [] |
| 7 | [Seq#02] Step4 输入准备：同 Seq#01 Step3（<S_TRANSACTION_ID>、<EUICC_CHALLENGE | [] | [] |
| 8 | [Seq#02] MTD_STORE_DATA_SCRIPT(#AUTH_SMDP_MATCH_ID) | ["S8-C1", "S8-C2", "S8-C3", "S8-C4", "S8-C5", "S8-C6"] | ["RQ26_029", "RQ26_005", "RQ26_006", "RQ26_007", "RQ26_008", "RQ26_034", "RQ26_035", "RQ31_025", "RQ31_046", "RQ31_047", "RQ31_048", "RQ31_049", "RQ31_050", "RQ31_051", "RQ31_053", "RQ31_054", "RQ31_055", "RQ31_076", "RQ31_079", "RQ42_001", "RQ43_001", "RQ43_002", "RQ45_002", "RQ55_004", "RQ55_005", "RQ57_094", "RQ57_095", "RQ57_096", "RQ57_097", "RQ57_098", "RQ57_099", "RQ57_101", "RQ57_102", "RQ57_103", "RQ57_104", "RQ57_105", "RQ57_106", "RQ57_107", "RQ57_108"] |
| 9 | [Seq#03] MTD_STORE_DATA (#GET_EUICC_INFO1) | ["S9-C1", "S9-C2", "S9-C3"] | [] |
| 10 | [Seq#03] MTD_STORE_DATA (#GET_EUICC_CHALLENGE) | ["S10-C1", "S10-C2"] | [] |
| 11 | [Seq#03] Step4 输入准备：同 Seq#01 Step3（含 IMEI 场景设备信息 #S_DEVICE_INFO_IMEI 经 | [] | [] |
| 12 | [Seq#03] MTD_STORE_DATA_SCRIPT(#AUTH_SMDP_IMEI) | ["S12-C1", "S12-C2", "S12-C3", "S12-C4", "S12-C5", "S12-C6"] | ["RQ26_029", "RQ26_005", "RQ26_006", "RQ26_007", "RQ26_008", "RQ26_034", "RQ26_035", "RQ31_025", "RQ31_046", "RQ31_047", "RQ31_048", "RQ31_049", "RQ31_050", "RQ31_051", "RQ31_053", "RQ31_054", "RQ31_055", "RQ31_076", "RQ42_001", "RQ43_001", "RQ43_002", "RQ45_002", "RQ55_004", "RQ55_005", "RQ57_094", "RQ57_095", "RQ57_096", "RQ57_097", "RQ57_098", "RQ57_099", "RQ57_101", "RQ57_102", "RQ57_103", "RQ57_104", "RQ57_105", "RQ57_106", "RQ57_107", "RQ57_108"] |

### 6.1 充分性分析（启发式，不作最终裁定）

- cas：`NO_MECHANICAL_GAPS`（全步有检查=True；REQ 全覆盖=False；ErrorCount==0=True）
- cas 物化核对（启发式旁证，权威见下行 attestation）：声明检查 11 项 / 生成体 checkData 92 次 / S 标号重合 11 / 计数缺口 0 / 形态 `FULL`；执行面 `PASS`（计数缺口须结合绑定层隐含断言核验，非直接判缺陷）
- **cas 编译器自证（check_attestation，同批构建）**：声明 None = js 41 + binding 0 + gap 0；缺口判定以本行为权威（启发式计数仅旁证）
- man：映射行 11；TTR 期望/实际回声 140；厂商工具内置审计（TTR 期望/实际回声行为证据）；脚本字节级充分性不可完全外部验证
- cas 信息步（无线上断言义务）：[3, 7, 11]
- REQ 声明面 vs caseir 引用面差异（9 项，非等价缺口判定）：['RQ26_005/006/007/008/010/012/013/029/033/034/035', 'RQ31_025/046-055/076-079', 'RQ36_017', 'RQ43_001/002', 'RQ45_002/006/026/026_1/028/030/032', 'RQ55_004/005', 'RQ57_093-108）', '§4.2.18.1 全集', '与 4.2.18.2.1 表 184 同集）']
- caseir open_items：
  - <S_TRANSACTION_ID> / <S_SMDP_CHALLENGE> / <S_SMDP_SIGNATURE1> / <EUICC_CI_PK_ID_TO_BE_USED> / <EUICC_CHALLENGE> / <EUICC_SIGNATURE1> 等全部运行时动态值，一律 dynamic/null，未编造
  - #CERT_S_SM_DPauth_ECDSA 证书字节来自 SGP.26 捆绑（F_annexA 注），字节不在输入包
  - 每条 Test Sequence 执行后须按 2.2.2 执行 clean-up（CU）恢复 Common Initial State
  - R2 残余占位：命令数据已按 S22_auth_srv 闭合为模板字面量；<S_TRANSACTION_ID>/<EUICC_CHALLENGE>/服务器 challenge/签名 为 G_annexB 运行时动态值，serverCertificate 字节在 SGP.26 捆绑不在输入包，DeviceInfo 内层标签与 SubjectKeyIdentifier/Certificate 编码标签语料缺席（保守占位），各 <L_*> 长度随动态值定，分块 P1/P2 逐块值运行时定
  - CtxParams1 CHOICE 备选项按语料（S22_auth_srv :71）无显式标签 → 承载 SEQUENCE 标签 30 编码；若 SGP.22 原文该备选带显式标签则为语料漂移点，回原件裁定
  - 【B-5 闭合登记 2026-10-04】CtxParams1 30→A0 与 matchingId 0C→80 漂移已按上条裁定修复（RSPDefinitions AUTOMATIC TAGS + 黄金切片线缆 + vendor RSP_Obj tag 表三源对账）；多占位模板经 dynamic_templates/dynamic_template 声明面机械闭合（fail-closed 合同，未声明占位仍拒编）；F S_DEVICE_INFO_IMEI 的 '01000'H 五奇尼 typo 按 010000（3B VersionType）读（vendor TestStep.js:266 实证）。

## 7. 分类结论（封闭枚举）

| 轴 | 计数 | 说明 |
|---|---|---|
| `SCRIPT_DIALECT` | 147 | 闭包文件差：man-only 3 / cas-only 51；命令序列差：man-only 55 / cas-only 38 |
| `GEN_DIFF` | 9 | REQ 覆盖缺口：['RQ26_005/006/007/008/010/012/013/029/033/034/035', 'RQ31_025/046-055/076-079', 'RQ36_017', 'RQ43_001/002', 'RQ45_002/006/026/026_1/028/030/032', 'RQ55_004/005', 'RQ57_093-108）', '§4.2.18.1 全集', '与 4.2.18.2.1 表 184 同集）'] |

- 置信度：heuristic；需人工复核：False

## 8. 证据路径

- man 包：`../../packages/man/4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP-man.zip`
- man TTR：`/Users/yuhu/cas/原料/切片/4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP/logs/20260909_011618_ok/result/ESIM_TEST_SGP_23/TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_Nominal_Without_MatchingID_in_CtxParams1.ttr`
- cas 包/源：`../../packages/cas/4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP-cas.zip`
- cas TTR：`/Users/yuhu/cas/experiments/4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP-20261004_022633/logs/30a0043a7f6340bd837b1f977c952a4b/result/TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP/TC_eUICC_ES10b_AuthenticateServer_SM_DP_BRP_01_03_Nominal_TC_3_Test_Sequence.ttr`
- spec_intl：`/Users/yuhu/cas/原料/切片/4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP/spec_intl/SGP.23-v1.16_4.2.18_AuthenticateServer_SM-DP+_BRP.md`
- caseir：`/Users/yuhu/cas/产物/4.2.18.2.2-TC_eUICC_ES10b.AuthenticateServer_SM-DP+_BRP/caseir_materialized_gate.json`
- step_map：`—`

